Reddit was the victim of a cyberattack on Sunday, 5 February 2023, allowing attackers to infiltrate internal systems and steal documents and source code.<\/p>\n
The hackers gained access to Reddit’s systems through a targeted phishing on its employees.<\/p>\n
A staff member took the bait and entered their credentials and two-factor authentication tokens on a webpage posing as Reddit’s intranet site.<\/p>\n
However, the company says no user passwords or accounts have been compromised based on its recent investigations.<\/p>\n
“On Sunday night (pacific time), Reddit systems were hacked as a result of a sophisticated and highly-targeted phishing attack,” Reddit said in a post<\/a><\/strong>.<\/p>\n “They gained access to some internal documents, code, and some internal business systems.”<\/p>\n It noted that none of its primary production systems \u2014 those responsible for running Reddit and storing its data \u2014 appeared to have been breached.<\/p>\n Reddit became aware of the breach after the employee self-reported the incident to its security team.<\/p>\n “The Security team responded quickly, removing the infiltrator’s access and commencing an internal investigation,” it said.<\/p>\n “We’re continuing to investigate and monitor the situation closely and working with our employees to fortify our security skills.”<\/p>\n “As we all know, the human is often the weakest part of the security chain,” Reddit added.<\/p>\n It said the stolen data includes limited contact information for company contacts and current and former employees and some details about Reddit’s advertisers.<\/p>\n “We have no evidence to suggest that any of your non-public data has been accessed, or that Reddit’s information has been published or distributed online,” Reddit added.<\/p>\n The attackers gained access to Reddit’s systems through a phishing campaign targeting its employees.<\/p>\n","protected":false},"author":341076,"featured_media":458365,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[27],"tags":[44160,26872,417,8045],"class_list":["post-479757","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-cyberattack","tag-data-breach","tag-phishing","tag-reddit"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/479757"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/341076"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=479757"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/479757\/revisions"}],"predecessor-version":[{"id":479879,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/479757\/revisions\/479879"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/458365"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=479757"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=479757"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=479757"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nNow read: Cybercriminals creating ChatGPT-powered Telegram bots that can write malware<\/a><\/h2>\n","protected":false},"excerpt":{"rendered":"